setupupgrade.sendcleansoft.net

Advert LTD

Domain Information

The domain setupupgrade.sendcleansoft.net registered by Advert LTD was initially registered in May of 2015 through REGISTRAR OF DOMAIN NAMES REG.RU LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the SingleHop, Inc. network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Illinois, United States (US)

Create date:
Friday, May 29, 2015

Expires date:
Sunday, May 29, 2016

Updated date:
Friday, May 29, 2015

ASN:
AS32475 SINGLEHOP-INC - SingleHop,US

Root domain:

Google Safe Browsing:
phishing

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.OOOKodIntertainment (M), PUP.InstallCore.OOOKodIn (M), PUP.InstallCore.OOOKodIn.Installer (M), PUP.Bundler.Astalavi.Meta (M), PUP.installCore.OOOKod7 (M), PUP.installCore.OOOAdver (M), PUP.InstallCore (M)
98.00%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.00%

F-Secure
Application:W32/Generic.70053c248f!Online
2.00%

The domain setupupgrade.sendcleansoft.net has been seen to resolve to the following 12 IP addresses.

lb-182-241.above.com
September 17, 2016

August 22, 2016

ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
August 20, 2016

August 16, 2016

June 26, 2016

June 21, 2016

June 19, 2016

June 7, 2016

June 7, 2016

June 4, 2016

May 31, 2016

usdedi1.cipo.me
February 16, 2016

File downloads found at URLs served by setupupgrade.sendcleansoft.net.

 
Latest 30 of 385 download URLs

The following 226 files have been seen to comunicate with setupupgrade.sendcleansoft.net in live environments.

TCP » 54.72.9.51:80

 
Latest 20 of 232 files

URL:
http://setupupgrade.sendcleansoft.net/

Google Analytics:
UA-24411584

Title:
“Reimage Repair”

Web server:
Apache/2.2.15 (CentOS)

30 of 35 related domains